Description

Apache Tomcat 4.0.3, when running on Windows, allows remote attackers to obtain sensitive information via a request for a file that contains an MS-DOS device name such as lpt9, which leaks the pathname in an error message, as demonstrated by lpt9.xtp using Nikto.

Remediation

References

CVE-2005-4703

Related Vulnerabilities

WordPress Plugin Mobile Booster Security Bypass (1.0)

Piwigo Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-2209)

ownCloud CVE-2013-7344 Vulnerability (CVE-2013-7344)

Apache Traffic Server Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2012-0256)

Grafana Improper Preservation of Permissions Vulnerability (CVE-2022-36062)

Severity

Medium

Classification

CVE-2005-4703

Tags

Missing Update Known Vulnerabilities